Back to home

Privacy Policy

Last updated: September 6, 2026

This policy covers both the Ayla mobile application and this website. In short: your diary stays on your phone, we run no analytics and no advertising, and the only thing that ever leaves your device is text you explicitly ask Ayla to work on.

1. Definitions

App — the Ayla mobile application for iOS. Website — ayla-tracker.app. We — the developer of Ayla (see Contact). You — the person using the App or the Website. Entries — moods, notes, answers, memories, photos and any other content you create in the App.

2. Principles

  • Your entries are stored on your device, not on our servers.
  • Nothing leaves your device automatically. Text is sent out only when you use a feature that requires it.
  • We do not use analytics, advertising, tracking, or device identifiers of any kind.
  • The App has no accounts and requires no registration.
  • We do not sell or rent your data. Ever.

3. What we collect

In the App

Stored only on your device: mood entries, notes, tags, answers to daily questions, memories, photos you add, habits, streaks and app settings. This data is held in the app's local database. We have no copy of it and no way to read it.

Voice.Speech recognition runs entirely on your device using Apple's built-in engine. Audio recordings never leave your phone and are not stored by us at any point.

Sent to our server only when you use these features:

  • Voice note cleanup — the recognized text of that note, plus any custom words you added in settings, so punctuation and names can be corrected.
  • Chat with Ayla — the messages of that conversation.
  • Weekly or monthly summary — the moods, notes and influences from that period, at the moment you tap to create the summary.

We do not store this text on our server. It passes through and is forwarded to the AI provider described in section 6a.

What we never collect from the App: your name, email, phone number, contacts, location, device identifiers, advertising identifiers, or usage analytics.

Subscriptions

Purchases are handled entirely by Apple. We never see or receive your payment details. We only learn whether an active subscription exists.

On the Website

If you join the waitlist, we collect your email address. That is all. The Website uses no cookies, no analytics and no trackers.

4. How we use it

  • To provide the features you asked for: cleaning up a voice note, answering in chat, generating a summary.
  • To notify you when Ayla launches, if you joined the waitlist.
  • To reply to you if you contact support.

We do not use your content for advertising, profiling, or to build a profile of you. We do not use it to train our own models.

5. Legal basis (GDPR)

  • Performance of a contract — processing the text you send in order to deliver the feature you requested.
  • Consent — joining the waitlist. You can withdraw it at any time via the unsubscribe link.
  • Legitimate interest — keeping the service secure and working.

Notes about mood may constitute health-related data under GDPR. We never process it for any purpose other than delivering the feature you explicitly requested, and it is never stored on our servers.

6. Who we share with

Only the parties listed below, and only for the purposes described. We do not share your data with anyone else, and we do not sell it.

  • Apple — app distribution and subscription payments.
  • Vercel — hosting for this website and for the server that forwards text to the AI provider.
  • Resend — sending waitlist emails.
  • AI providers — see the next section.

We may also disclose information where required by law.

6a. Third-party AI services

Voice note cleanup, chat and summaries are produced by a language model that we do not run ourselves. When you use one of those features, the relevant text is sent through the following chain:

Ayla app → our server (Vercel) → Polza.ai → OpenRouter → model provider

The current model is provided by OpenAI and reached through OpenRouter. This list may change as providers are added or replaced. Each provider handles data under its own terms, which you can read on their websites.

Retention by AI providers: [TO BE COMPLETED — pending written confirmation from the provider about whether prompts are logged, for how long, and whether they are used for model training.]

If you prefer not to send any text off your device, you can turn off AI processing in the app: Settings → AI. Voice recording, transcription and all other features continue to work locally.

7. Retention

  • Your entries — kept on your device for as long as the app is installed. Deleting the app deletes them.
  • Text sent for AI processing — not stored on our server. Retention on the provider side is described in section 6a.
  • Waitlist email — kept until you unsubscribe.
  • Support correspondence — kept as long as needed to resolve your request.

8. Your rights

Under GDPR and similar laws you have the right to access, correct, delete and export your data, and to object to processing.

In practice, most of this is already in your hands:

  • Access and export — the app can export everything you have written: Settings → Data → Export.
  • Correction and deletion — edit or delete any entry directly in the app.
  • Delete everything — the app has no account and stores nothing on our servers, so deleting the app removes all of your data permanently. There is no copy for us to delete.
  • Stop sending text out — Settings → AI.
  • Waitlist — the unsubscribe link in any email.

For anything else, write to us at the address in section 12.

9. Security

Your entries are protected by your device: iOS file encryption and your passcode or biometrics. Everything sent to our server travels over HTTPS. Our server holds no database of your content — text passes through and is not written to disk.

No system is perfectly secure, and we cannot guarantee absolute security of data transmitted over the internet.

10. International transfers

The services listed in section 6 operate servers outside your country, including in the United States. When you use an AI feature, the text is processed abroad. Transfers rely on the safeguards those providers have in place, such as Standard Contractual Clauses.

11. Children

Ayla is not intended for children under 13, or under 16 in the European Union. We do not knowingly collect data from children. If you believe a child has provided us with data, contact us and we will remove it.

12. Changes to this policy

If we change this policy we will update the date at the top. For significant changes affecting how your data is handled, we will also announce it in the app or by email.

13. Contact

Questions about this policy or your data: support@ayla-tracker.app

[TO BE COMPLETED — registered name and address of the data controller.]